MİNDDX DİJİTAL DÖNÜŞÜM TEKNOLOJİLERİ SAN. VE TİC. A.Ş. (“MindDX” or the “Company”) is the data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”). This notice tells visitors to the minddx.ai website (the “Site”), and anyone who contacts us through it, how their personal data is processed.
Data controller
| Company | MİNDDX DİJİTAL DÖNÜŞÜM TEKNOLOJİLERİ SAN. VE TİC. A.Ş. |
|---|---|
| Address | Ataköy 7-8-9-10. Kısım Mahallesi Bedri Rahmi Eyüboğlu Cad. Selenyum Ataköy No:4 C Blok No:74 Bakırköy/İstanbul |
| MERSİS | 0368027229300013 |
| Tax office / Number | Bakırköy / 368 027 2293 |
| info@minddx.ai | |
| Phone | +90 (212) 808 00 79 |
1. What personal data we process, and why
- The «Start Assess» and «Talk to a consultant» form. We process your full name, work e-mail address and company name, and optionally your phone number and message. The form also records the type of request you chose, your Assess route preference, the page language and the version of the text you agreed to, together with the campaign tags (UTM) you arrived with and the page and section the form was sent from. We use this to receive your request and contact you: to offer a meeting, scope and price information, to run the customer-relationship process and to measure which channel the request came from.
- MindDX Assistant. We process the messages you write after opening the assistant, the type of page you are on and the language, in order to answer your question and to review and improve the quality of the service. Answers are generated by an artificial-intelligence model called through MindDX Platform, based on MindDX’s corporate information. Conversation records are kept without being linked to your identity, with e-mail addresses and phone numbers masked. The conversation history is kept only in your browser tab and is deleted when the tab closes. If you fill in the contact form inside the assistant, the details you give are processed for the same purpose and in the same way as the form above.
- WhatsApp, e-mail and phone. When you reach us through these channels we process your name, phone number and/or e-mail address and the content of your request, in order to answer it.
- Visiting the Site. When you view a page, your IP address and browser information are processed technically in two places: in the access logs of the infrastructure provider that hosts the Site, and by MindDX Platform when the assistant files load. All of the Site’s files, fonts included, are served from the Site’s own server. We count which buttons and links are used without cookies and without any identifier; the count never contains your name, e-mail address, phone number or anything you typed. The purpose is to operate and secure the Site and to measure, in aggregate, how its content is used.
- Moving to MindDX Platform. Some links on the Site (for example the meeting form or the free digital maturity scan) take you to platform.minddx.ai. Data collected there is covered by the MindDX Platform privacy and KVKK notice.
We do not send you commercial electronic messages without your explicit consent. Your personal data is never sold.
2. How we collect it, and the legal grounds
Your personal data is collected electronically, by automated or partly automated means, through the Site’s forms, MindDX Assistant and the WhatsApp, e-mail and phone channels. It is processed on these legal grounds under Article 5 of the KVKK:
- it is directly related to the conclusion or performance of a contract (Art. 5/2-c): answering your request, the meeting and proposal process;
- the legitimate interest of the data controller (Art. 5/2-f): the security of the Site, anonymous usage measurement, quality control of the assistant and follow-up of customer relationships;
- compliance with a legal obligation (Art. 5/2-ç) and the establishment, exercise or protection of a right (Art. 5/2-e);
- where none of these applies, your explicit consent.
3. Who we transfer your personal data to, and why
Your personal data is transferred only as far as the purposes above require, and in line with Articles 8 and 9 of the KVKK, to these groups of recipients:
- Hosting and infrastructure providers: to run the Site and MindDX Platform. The MindDX Platform application database is hosted in the EU.
- Customer-relationship (CRM) software provider: to record and follow up your form requests.
- E-mail delivery provider: to notify our sales team of your request.
- Artificial-intelligence service provider: to generate the assistant’s answers.
- Competent public authorities and our legal advisers: to meet legal obligations and protect our rights.
As some of these providers are located abroad, your personal data may be transferred abroad in line with the conditions of Article 9 of the KVKK. We will give you the current list of our service providers on your application under Article 11 of the KVKK.
4. How long we keep it
Your personal data is kept for as long as the purpose of processing requires and for the periods set by the applicable legislation. Form requests are kept for one year from the last contact, and assistant conversation records for at most 90 days. When the period ends, the data is deleted, destroyed or anonymised.
5. Your rights under Article 11 of the KVKK
As a data subject you have the right to:
- learn whether your personal data is processed,
- request information about the processing if it is,
- learn the purpose of the processing and whether the data is used for that purpose,
- know the third parties, in Türkiye or abroad, to whom it is transferred,
- request its correction if it is incomplete or inaccurate,
- request its deletion or destruction under the conditions of Article 7 of the KVKK,
- request that the correction, deletion or destruction be notified to the third parties it was transferred to,
- object to a result against you that arises from analysis exclusively by automated systems,
- claim compensation for damage suffered through unlawful processing.
How to apply
To exercise your rights you can fill in the KVKK application form (PDF) or write a letter that contains the information listed in the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application must state your name and surname; your Turkish identity number if you are a Turkish citizen, or your nationality and passport or identity number if you are not; the residential or business address for notifications; your e-mail address and telephone number, if any; and the subject of your request. You can send it by any of these channels:
- In person or by post: hand your application, signed in ink, to Ataköy 7-8-9-10. Kısım Mahallesi Bedri Rahmi Eyüboğlu Cad. Selenyum Ataköy No:4 C Blok No:74 Bakırköy/İstanbul together with a document that shows your identity, or send it there by post or courier.
- Through a notary: have your application served on the same address by a notary public.
- With a secure electronic signature or a mobile signature: e-mail the application, signed with one of these, to info@minddx.ai.
- From your registered e-mail address: write to info@minddx.ai from the e-mail address you gave us earlier and that is registered in our systems.
Writing «KVKK application» on the envelope or in the e-mail’s subject line helps your application reach the right team quickly. If you apply on someone else’s behalf, attach the document that shows your authority (for example a notarised power of attorney). We may ask you for additional information to verify your identity.
Applications are concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request; where the action involves an additional cost, the fee set by the Personal Data Protection Board may apply. If your application is rejected, if you find our answer insufficient, or if we do not answer in time, you may complain to the Personal Data Protection Board within thirty days of learning of the answer and in any case within sixty days of the application date.
Effective date: 1 October 2026 · Version: en-2026-10-01.2